Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1d480b6d-25fc-4f37-b125-f45ce236f4ea.roa
File: 1d480b6d-25fc-4f37-b125-f45ce236f4ea.roa (raw, json)
Hash identifier: /ILdQ47+OfsnaLqUlbKkNCXWBwxjGBQD84wDUgRTjd8=
Subject key identifier: E6:60:51:7C:E8:51:F9:F9:C8:EE:EA:63:7F:39:EB:DC:47:C4:36:34
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 6587827BC6263D2F5D349E2159DC976640AE948F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1d480b6d-25fc-4f37-b125-f45ce236f4ea.roa
Signing time: Mon 26 Oct 2026 05:31:04 +0000
ROA not before: Mon 26 Oct 2026 05:31:04 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d01d:800::/37 maxlen: 37
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:87:82:7b:c6:26:3d:2f:5d:34:9e:21:59:dc:97:66:40:ae:94:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Oct 26 05:31:04 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=525b68d11e5346ebde3ccfd62b387ae6de36f9697ddbc904bb4ad82c33825033, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8b:dc:6e:06:bf:9a:40:b5:e1:7e:22:b0:ba:
30:81:7f:30:d8:d1:45:dd:26:6a:a0:13:8d:ac:44:
5e:36:83:dd:e7:7b:36:11:b0:47:da:e0:c4:c8:14:
be:f2:d1:2d:b5:72:58:36:26:01:4a:bd:e4:33:5a:
e1:af:f8:04:5b:10:7f:3c:8c:6e:97:dd:73:2b:0d:
6a:18:ff:6a:c7:79:8a:22:7f:62:d2:21:95:6a:d6:
2b:61:2f:6a:c8:8b:78:c1:00:57:5c:35:c8:4e:06:
d6:b2:63:0a:5e:79:1c:89:6c:1c:1e:4d:c0:6d:5c:
b0:62:e4:dd:4d:14:92:f3:2a:97:2b:2b:36:ac:2b:
ac:d0:d8:18:1a:35:2d:e4:0d:2a:d5:b2:23:44:dd:
98:aa:dc:b5:0c:d6:fe:9b:4a:62:60:b8:64:06:11:
d7:bb:e7:6a:18:0b:37:5a:32:22:7d:4b:15:cf:8e:
7e:92:28:1a:44:1f:53:58:fa:fa:d7:d8:6a:b7:63:
4b:ac:ba:c2:fb:7b:9e:bd:ff:cd:1d:6a:a5:e5:20:
a1:39:23:70:4e:9d:e4:48:dd:1e:44:e9:bb:22:5d:
6c:16:c7:ed:84:1b:ee:95:6c:9b:5c:fe:af:f2:dd:
02:78:05:10:20:00:ec:8e:5a:d2:13:79:36:35:45:
08:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:60:51:7C:E8:51:F9:F9:C8:EE:EA:63:7F:39:EB:DC:47:C4:36:34
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1d480b6d-25fc-4f37-b125-f45ce236f4ea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d01d:800::/37
Signature Algorithm: sha256WithRSAEncryption
c9:b8:62:da:b0:37:05:b7:82:f7:11:32:67:eb:ac:94:7f:cf:
0b:9c:ec:dc:c9:65:b4:9a:81:51:f6:9a:d5:7e:d2:e1:6e:4a:
73:a4:c0:5c:99:d7:97:44:9a:58:b7:f9:50:b1:bc:14:0e:b4:
34:b2:bd:db:aa:75:0f:4d:ae:e5:d8:f5:e1:c4:28:01:2f:08:
bf:fc:71:3d:dc:c2:9d:ec:c8:4a:77:88:8f:61:62:b7:f0:fa:
b8:9d:cd:b7:3a:d6:ca:86:80:cb:6a:b9:7a:84:70:06:0e:77:
91:58:b2:8b:de:f8:03:b1:f4:db:ff:f9:30:ad:04:45:4d:59:
49:f7:48:a9:a8:1d:a3:56:01:0f:aa:7b:d6:fb:34:31:2c:4f:
04:87:37:9e:8f:c9:5e:20:70:fd:86:0f:21:1a:e9:93:52:8e:
81:dc:1a:e2:d3:a7:57:50:f9:e7:4a:b6:a0:19:e5:ab:f0:06:
a1:47:7d:57:ba:aa:11:48:1c:2f:99:0c:c0:8c:87:84:30:0f:
ad:75:fe:54:83:3a:22:43:75:7a:f7:1d:0c:0c:96:f8:f6:e0:
5b:44:f0:57:74:5f:94:80:e9:94:89:87:49:0c:5c:87:ed:55:
60:12:85:91:9a:67:b2:8f:12:f4:ae:63:ad:6c:b2:45:6d:64:
26:85:ec:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 23:52:49 2026 by rpki-client